2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44014 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the form... |
| CVE-2023-44013 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parame... |
| CVE-2023-43291 | CRITICAL | 9.8 | 1.6% | Sep 27, 2023 | Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code v... |
| CVE-2023-43234 | CRITICAL | 9.8 | 1.0% | Sep 27, 2023 | DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_con... |
| CVE-2023-43222 | CRITICAL | 9.8 | 0.8% | Sep 27, 2023 | SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. |
| CVE-2023-43216 | CRITICAL | 9.8 | 1.2% | Sep 27, 2023 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. |
| CVE-2023-43187 | CRITICAL | 9.8 | 45.4% | Sep 27, 2023 | A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.1... |
| CVE-2023-43154 | CRITICAL | 9.8 | 1.0% | Sep 27, 2023 | In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during l... |
| CVE-2023-42657 | CRITICAL | 9.6 | 17.0% | Sep 27, 2023 | In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered. An attacker ... |
| CVE-2023-42462 | CRITICAL | 9.1 | 1.0% | Sep 27, 2023 | GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide... |
| CVE-2023-42461 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide... |
| CVE-2023-41878 | CRITICAL | 9.8 | 0.6% | Sep 27, 2023 | MeterSphere is a one-stop open source continuous testing platform, covering functions such as test tracking, interface t... |
| CVE-2023-41320 | CRITICAL | 9.8 | 32.1% | Sep 27, 2023 | GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide... |
| CVE-2023-40455 | CRITICAL | 10 | 1.0% | Sep 27, 2023 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed proc... |
| CVE-2023-40436 | CRITICAL | 9.1 | 1.0% | Sep 27, 2023 | The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to ... |
| CVE-2023-40400 | CRITICAL | 9.8 | 1.5% | Sep 27, 2023 | This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS S... |
| CVE-2023-3767 | CRITICAL | 9.8 | 1.5% | Sep 27, 2023 | An OS command injection vulnerability has been found on EasyPHP Webserver affecting version 14.1. This vulnerability co... |
| CVE-2023-39375 | CRITICAL | 9.8 | 0.6% | Sep 27, 2023 | SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges |
| CVE-2023-39347 | CRITICAL | 9 | 0.5% | Sep 27, 2023 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability ... |
| CVE-2023-38586 | CRITICAL | 10 | 1.0% | Sep 27, 2023 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed ... |
| CVE-2023-35071 | CRITICAL | 9.8 | 0.6% | Sep 27, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MRV Tech Logging A... |
| CVE-2023-43457 | CRITICAL | 9.8 | 1.0% | Sep 25, 2023 | An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in... |
| CVE-2023-43644 | CRITICAL | 9.8 | 0.7% | Sep 25, 2023 | Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafte... |
| CVE-2023-39640 | CRITICAL | 9.8 | 0.5% | Sep 25, 2023 | UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHoo... |
| CVE-2023-4521 | CRITICAL | 9.8 | 39.6% | Sep 25, 2023 | The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to p... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now